Forum Discussion

Luminary

Sep 04, 2017

S2S VPN with Cisco RV340 - "ERROR: ID mismatched with subjectAltName."

We are in the process of setting up a new Cisco RV340 in a site to site with a FVS336Gv3. We are using certificates, and have generated a cert for the RV340 and have successfully set it up with a S2S...

Troubleshooting

train_wreck

Luminary

Sep 07, 2017

Here are IKE & IPsec SA configs. Pretty sure everything matches....

Netgear IKENetgear IPsec SACisco IKE & SA configCisco IPSec Profile

JohnC_V

NETGEAR Employee Retired

Sep 09, 2017

train_wreck,

Thank you for the attachments.

I see that you do have the same configurations for IPSec on both routers. "ID mismatch with subjectAltName" refers to your identifiers which is the local and remote certificates that you are using. May I know if your Netgear router is running on its latest firmware version?

Regards,

train_wreck
Luminary
Sep 11, 2017
Latest version (April 2017, the last one you guys will make apparently).

Here are certs..... I mentioned "Cisco.site" in the previous posts, I have regenerated the Cisco's cert numerous times in testing this, and all references to it on either routers have been changed to "Cisco5.site".
- JohnC_V
  NETGEAR Employee Retired
  Sep 12, 2017
  train_wreck,
  
  It seems that everything should be ok now but it still not working. Let me inquire this case that you have and I'll get back to you immediately.
  
  Regards,
- JohnC_V
  NETGEAR Employee Retired
  Sep 12, 2017
  train_wreck,
  
  I've been thinking about the certificate that you have. Was it the same certificate that you've been to the Cisco 1921? I believe if the connection is still up and running from the Cisco 1921, you may need to create another certificate for the FVS336Gv3. May we be able to try to create another certificate just for the Netgear connection?
  
  Regards,